Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          TVq5Kq81FtTLfWFRAyX/bpzqm2FJ0bl+IrGML5+hLFo=
Subject key identifier:   DA:5E:6D:D7:5D:49:03:01:5D:85:83:68:1F:4F:1F:21:4A:F7:E0:E9
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       019D2AA9C89EF4FBB5BF2E445D472FDF2750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          188F
Signing time:             Thu 26 Mar 2026 15:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 15:01:03 +0000
Files and hashes:         1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
                          2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
                          3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: ErecpgMFRgtqTfeAix0q2SV31NhNYuJ9XOG5Hf5NxZw=)
                          4: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:c8:9e:f4:fb:b5:bf:2e:44:5d:47:2f:df:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Mar 26 15:01:03 2026 GMT
            Not After : Mar 27 15:01:03 2026 GMT
        Subject: CN=da5e6dd75d4903015d8583681f4f1f214af7e0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fd:11:d2:79:d3:cd:45:b3:cc:d2:1b:d8:3e:
                    f9:8e:fe:39:a3:11:40:ea:27:89:21:eb:96:41:6f:
                    ac:65:d7:b4:26:47:e0:09:32:a4:7c:88:f9:e8:3f:
                    e2:75:4b:4f:c1:a5:62:14:ba:7d:96:90:64:51:83:
                    15:c1:ab:fc:0a:ec:92:7e:6c:07:0d:3e:eb:2c:92:
                    7a:bc:ff:ad:f6:bb:09:22:21:be:96:a2:4a:a5:17:
                    17:c9:7e:b2:5c:a2:43:ab:d9:04:f6:c4:df:4c:1b:
                    c8:07:5f:72:c0:42:8d:e3:9a:76:c2:45:e5:d9:22:
                    f8:85:d6:b6:06:54:63:7c:55:0f:c0:ac:10:7b:50:
                    13:52:a4:fb:44:eb:6c:39:41:b2:97:75:89:3e:70:
                    20:03:92:a2:3a:80:d2:70:65:b4:fd:53:bb:3c:12:
                    bf:cb:95:a9:59:01:ea:66:4a:c5:22:9c:28:84:47:
                    b3:76:76:58:89:a2:7b:d0:af:20:bf:47:8e:73:b3:
                    09:2d:a3:fa:bb:df:c7:e6:61:27:7f:f2:d3:cd:2c:
                    1f:9a:e7:c0:9f:81:2d:ee:2c:af:4b:d7:cb:94:07:
                    84:95:6f:50:47:3f:de:3a:67:61:ff:3b:d1:8c:24:
                    d7:8a:65:40:c3:75:c6:f6:46:b2:b9:29:c6:2e:c8:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5E:6D:D7:5D:49:03:01:5D:85:83:68:1F:4F:1F:21:4A:F7:E0:E9
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:51:4a:39:4e:f8:2b:fc:90:3c:d5:d1:46:a4:3e:93:07:51:
         e0:85:c4:c2:20:20:4c:d5:c8:ba:49:d7:bf:a3:bd:88:10:d0:
         51:9f:ac:87:f2:18:79:eb:0a:95:17:32:ee:36:e7:83:a6:39:
         eb:ba:f0:b2:be:f3:9d:88:1e:90:c3:e0:b7:cd:b3:6b:7e:3a:
         8c:df:a4:5f:24:35:99:d6:c5:b7:17:7f:26:e7:9e:c1:5c:c4:
         2d:11:af:07:60:a8:b4:fe:2e:dd:e9:b8:27:db:4a:ed:16:e6:
         be:2d:6d:29:eb:46:ab:d2:a8:2a:f5:c9:c2:84:67:33:77:8b:
         ca:71:15:eb:93:9a:12:9c:16:96:ae:94:7f:a0:d2:58:fd:71:
         d4:25:53:fe:36:58:e5:2d:6f:c1:09:5b:5c:6f:b7:8d:48:ab:
         f7:94:68:bb:85:91:db:07:74:4e:54:36:e0:aa:da:cc:63:25:
         a3:cb:37:79:05:f3:09:5f:62:3b:b3:d6:a1:3e:ba:f0:59:59:
         dd:09:60:ee:87:05:83:f9:52:bb:02:d2:e2:50:72:6e:31:16:
         08:18:d0:40:5c:5a:2d:07:69:67:5f:6a:3e:f2:56:11:b9:5a:
         47:3a:40:38:83:b1:72:cd:da:75:5d:88:22:4b:bf:bf:18:d2:
         46:8e:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:05:26 2026 by rpki-client